Frequently asked questions

The app contains no networking code: no HTTP client, no sockets, no third-party SDK. It cannot upload, download or phone home, in the same way a calculator cannot. The single exception is buying 8PWD 2026 Pro, which Apple's StoreKit performs in Apple's own process. You can verify this with Airplane Mode and with the App Privacy Report in iOS Settings.

No. There is nothing to sign up for and nothing to sign in to. On day one the vault opens with your device — its own lock is the protection; Face ID / Touch ID for the app, and the master password and recovery phrase of anti-theft encryption, are optional locks you add later, and all of them stay with you.

iPhone and iPad with iOS 18 / iPadOS 18 or later, and Mac with macOS 15 or later. Each gets its own layout: tabs on iPhone, a sidebar and two-column lists on iPad, a table with an inspector on Mac.

Free for up to 10 passwords, with every feature. 8PWD 2026 Pro removes the limit: a one-time Lifetime purchase that never renews and supports Family Sharing, a Yearly subscription with a 7-day free trial and Family Sharing, or Monthly. Your App Store shows the prices for your region. Wi-Fi networks, two-factor codes, folders and text blocks never count towards the ten.

Yes. Pro is tied to your Apple ID. Buy it once and tap Restore purchases on the other devices. With Lifetime or Yearly, Family Sharing extends it to up to six family members on their own Apple IDs.

Thirteen: English, Traditional Chinese (Hong Kong), Simplified Chinese, Japanese, Korean, German, French, Spanish, Portuguese (Brazil), Italian, Arabic, Hebrew and Russian — the last three laid out right-to-left, PDFs included. The app follows your device language; Me › Language can pin another. Legal texts other than English are translations, and the English version prevails. This website is in the first ten.

Syncing needs a place in the middle that holds a copy of your vault, or at least knows when and where it moves. We chose to have none. Why no sync has the full reasoning.

The short way (3.1): Me › Export › Move or merge to another device sends the whole vault by AirDrop as one encrypted file with a 6-digit code; the other device merges it with a short wizard — identical records skipped, newer passwords kept, the rest added. The long way: export an encrypted .8pwd file, move it across with AirDrop, Files, iCloud Drive or a USB stick, and import it on the other device. Either way, repeating it later adds only what is new.

Not through servers of ours — that would undo the one property everything else rests on. What 3.1 added is a one-time AirDrop transfer with a merge wizard: a file you send when you choose to, directly between your two devices, not a sync. Nothing of yours ever sits on a server.

They back up the whole device, including 8PWD's encrypted database, and restore it as part of a device restore. That is Apple's mechanism, not sync, and the vault stays encrypted inside it. After a restore to a different device you will be asked for your master password once, because the key in the Keychain does not travel — and if you never set one, that restored vault can only be opened from your own backup file. Set the master password before you change phones.

Passwords, two-factor secrets, notes, Wi-Fi passwords, password history and the trash are AES-256-GCM ciphertext. Account names, field labels and folder names are stored readable so that search and the list work before you unlock. We state this plainly rather than let you assume otherwise.

Because most people abandon an app that opens with homework. A fresh vault is encrypted with a random key generated on your device and kept in its Keychain — that is real encryption from the first second. A master password (anti-theft encryption) adds something the Keychain cannot: a lock that a stolen phone with a known passcode cannot pass, and a way to open the vault on a different device. Turn it on under Settings when it matters to you; it takes a minute.

It is never stored. It is run through 600,000 rounds of PBKDF2-HMAC-SHA256 to derive a key that wraps the vault's data key. Someone who obtains the database file still has to break that.

It is a second key to the same vault: 12 words generated when you set your master password. Forget the password and the phrase gets you back in; changing the password does not change the phrase. Lose both and nobody — not us, not Apple — can open the vault.

No. There is no backdoor, no master key and no escrow, and there is no network path by which your key could reach us. What can still help is a backup you exported earlier.

It is off by default because a fresh vault is already protected by your device's own lock, and a prompt on every launch is a cost many people do not want. Turn it on under Me › Security and the data key in the system Keychain is released only after Face ID or Touch ID. Strict key protection additionally invalidates the cached key if your face or fingerprints change. With anti-theft encryption on and biometrics off, the master password is asked instead.

Yes — Easy Mode, on iPhone. Big text, big input fields, three buttons under the title (Language, Standard, More), four equal buttons at the bottom (Add password, Print all, Import, Export) and a scroll bar you can actually see. Every feature of Standard is still there under More › Advanced features — custom fields included — and it is the same vault, so you can set it up in Standard and hand it over in Easy Mode. Choose it on the first screen or under Me › Appearance › Easy Mode / Standard.

Because you are on the free version. Until you buy, each cold start shows the plans page once — Close is in the corner, it never blocks your passwords, and it appears at most five times a day. It stops the moment you buy any plan; “Use the free version for now” dismisses it for that launch.

Both, under Me › Appearance. Text size is a list of sizes with a live preview that resizes the whole app (Easy Mode has its own, larger range; on Mac, text size follows System Settings › Displays). Color scheme offers eleven — Amber, Navy, Crimson, Emerald, Gilt, Graphite, Violet, Azure, Teal, Rose, Mocha; tap one to see the whole app in it. Keeping a scheme other than Amber is part of Pro; previewing is free.

Passwords found in a public leak (up to 40 points — checked against a million leaked passwords bundled in the app), weak ones (20), reused ones (20), long unchanged (10 — you decide how long, from 1 month to 5 years) and no two-step verification where the site supports it (10), each in proportion to how many entries it affects; passkey sign-ins are never penalised. 95 and above is A; the grade drops one letter every 5 points to F at 70, then G, H, I, J. It is computed on device and never shared. The full method.

They are encrypted exactly like passwords — AES-256-GCM under a key that never leaves the device — and exist only in the vault and in your .8pwd backups. Filling happens through Apple's AutoFill extension one value at a time, into the field you tapped; the app or website you fill into never sees the vault. How keyboard filling works.

A copied password clears after 30 seconds and is excluded from Universal Clipboard, so it never appears on your other Apple devices. This cannot be turned off.

Yes — Me › Security on Mac; it is off by default. When it is on, the window is excluded from screen recordings and shared screens, and from your own screenshots as well — which is why it is a choice rather than the default.

Switch on 8PWD under Settings › General › AutoFill & Passwords (System Settings on Mac). Entries with a URL are then offered on matching sites and in apps; Face ID or Touch ID confirms, and after a successful unlock the extension skips the check for 10 minutes (adjustable). It fills passwords, passkeys, two-factor codes, card details and identity fields, and never hands your vault to the app you are filling into.

Yes, since 3.0. Websites and apps create the passkey; 8PWD stores it and signs you in with Face ID or Touch ID. The private key never leaves the device and only travels inside encrypted backups — there is no passkey cloud. The Passkeys module also shows which of your sites already support them. Passkeys explained.

No, and nothing can do that for you safely. What it does: the account deletion guide shows, for 2,100+ websites, where the delete button hides, how hard it is, instructions in your language, a link to the site's own page and a ready-made GDPR / CCPA / general request letter. You do the deleting; 8PWD shows the way. Browse it.

Yes. It generates standard TOTP codes on device. Use Google Authenticator's Export accounts screen and scan the QR code it shows — 8PWD imports the whole batch. Codes can be linked to accounts, pinned to a widget, and exported again as QR codes.

Local labels for whose password this is — Me, Sam, Mum — for one person managing a family's passwords on one device. Switch to a member and you see only theirs. Members have no login and nothing is sent between them; a member's share can be exported as its own file.

Each saved network shows a standard Wi-Fi QR code that iPhone and Android cameras understand. A guest scans and joins; nobody reads a password aloud. You can also scan the code on a router to save it.

Apple Passwords, macOS Keychain, Chrome, Edge, Brave, Firefox, Bitwarden, 1Password, KeePass 2, LastPass, Dashlane, NordPass, Proton Pass and Enpass, plus generic CSV and pasted text. Step-by-step guides cover each one.

Always. Export produces a .8pwd file; the plain form is XML that any text editor opens. Your data is never locked inside this app.

Yes — a 2FA widget for the Home Screen and Lock Screen showing pinned codes, with a privacy mode that shows only names until you tap. It reads a small encrypted snapshot, never the vault.

No Siri, by decision: reading a password aloud to an assistant is not something we want to make easy. Home Screen quick actions (new password, scan 2FA, search) and Spotlight search of account names are there instead.

Nothing is deleted. With more than ten records the vault becomes read-only: viewing, searching, copying and AutoFill keep working; adding, importing and restoring wait until you are under the limit or subscribe again.

Subscriptions are cancelled in Settings › Apple ID › Subscriptions at least 24 hours before the period ends; Lifetime never renews, so there is nothing to cancel. Refunds are Apple's — reportaproblem.apple.com. We never see your payment details.

Yes. Lifetime and Yearly support Apple's Family Sharing: up to six family members in your Family Sharing group get Pro on their own Apple IDs, each with their own vault on their own devices. Monthly does not. Members inside the app are a separate idea: labels on one device, no purchase involved.

If you expect to keep using a password manager for more than three years, Lifetime costs less than Yearly over that time and there is never a renewal to think about — that is why the app recommends it. Yearly is the way to try Pro for a week free. Monthly is for a single month of heavy use, such as moving house.

None. The App Store privacy label says “Data Not Collected”, and that is accurate: no analytics, no crash reports, no advertising identifiers, no accounts. This website loads no third-party resources and runs no scripts.

MNV LIMITED. Support is by email and a person answers. The legal notice has the registration details.

Turn on Settings › Privacy & Security › App Privacy Report on your iPhone or iPad, use 8PWD normally for a few days, then open the report and look under App Network Activity. 8PWD should list no domains at all; the only exception is Apple's own App Store traffic right after you buy Pro, which the system handles. If you ever see another domain, write to support@8pwd.com — that would be a bug.

8PWD is the family; 8PWD 2026 is this year's edition, the way Word 2003 and Word 2010 were two products. What you buy keeps working. A future year edition would be a separate app that imports 2026 backups.